Contact Button – The All-in-One Website Widget Security & Risk Analysis

wordpress.org/plugins/contact-button

Convert website visitors into contacts with 15 easy to use Contact Button apps. Widget apps include, Contact Forms, Call Now Buttons and more!

200 active installs v1.0.4 PHP 7.4+ WP 5.8.6+ Updated Jan 8, 2026
communication-toolscontact-buttoncontact-formcustomer-engagementwebsite-widget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Contact Button – The All-in-One Website Widget Safe to Use in 2026?

Generally Safe

Score 100/100

Contact Button – The All-in-One Website Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the 'contact-button' plugin version 1.0.4 exhibits a very strong security posture. The absence of any identified vulnerabilities in its history, combined with excellent code practices in the static analysis, suggests a well-developed and secure plugin. All SQL queries are prepared, all output is properly escaped, and there are no identified taint flows. The limited attack surface and appropriate use of nonces and capability checks further bolster its security. The presence of a single external HTTP request is the only minor area for potential concern, though without further context on its purpose and data handling, it's impossible to assign a significant risk. Overall, this plugin appears to be a low-risk option.

Key Concerns

  • External HTTP request detected
Vulnerabilities
None known

Contact Button – The All-in-One Website Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Contact Button – The All-in-One Website Widget Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
14 escaped
Nonce Checks
2
Capability Checks
1
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

100% escaped14 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
verify_and_save_settings (admin\class-contact-button-cb-admin.php:74)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Contact Button – The All-in-One Website Widget Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 11
actionplugins_loadedincludes\class-contact-button-cb.php:110
actionadmin_enqueue_scriptsincludes\class-contact-button-cb.php:124
actionadmin_enqueue_scriptsincludes\class-contact-button-cb.php:125
actionadmin_menuincludes\class-contact-button-cb.php:126
actioninitincludes\class-contact-button-cb.php:127
actionadmin_noticesincludes\class-contact-button-cb.php:128
actionadmin_noticesincludes\class-contact-button-cb.php:129
actionadmin_noticesincludes\class-contact-button-cb.php:130
actionadmin_headincludes\class-contact-button-cb.php:131
actionwp_headincludes\class-contact-button-cb.php:144
actionenqueue_scriptsincludes\class-contact-button-cb.php:145
Maintenance & Trust

Contact Button – The All-in-One Website Widget Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 8, 2026
PHP min version7.4
Downloads4K

Community Trust

Rating100/100
Number of ratings2
Active installs200
Developer Profile

Contact Button – The All-in-One Website Widget Developer Profile

Contact Button

1 plugin · 200 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Contact Button – The All-in-One Website Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/contact-button/admin/css/contact-button-admin.css/wp-content/plugins/contact-button/admin/js/contact-button-admin.js
Version Parameters
contact-button-admin.css?ver=contact-button-admin.js?ver=

HTML / DOM Fingerprints

Data Attributes
id="contact-button-id"name="contact-button-id"
FAQ

Frequently Asked Questions about Contact Button – The All-in-One Website Widget